$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft File: oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json) Hash identifier: Xjzs5LRYEOF/nCrr281jYCtZ9FYyheZYr/9OeRcSwnI= Subject key identifier: C1:D1:D8:9D:BE:4F:75:FF:B8:5F:7F:E4:F5:98:B5:8E:3F:0C:A5:8B Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Certificate serial: 04C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft Manifest number: 04A8 Signing time: Fri 18 Sep 2026 23:50:31 +0000 Manifest this update: Fri 18 Sep 2026 23:50:30 +0000 Manifest next update: Fri 25 Sep 2026 23:50:30 +0000 Files and hashes: 1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: aoBdHJhaN21Mdl2biP6mGo2hXab6rF/u+iW5QlR71z0=) 2: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: mD2HqpNx7VAE/fzRvuWKCUkO1WROa4R3hNCfEouu84g=) 3: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: FT+yGA0UMj3t+pSIyryVQQ/sEofGBhdL514V1fKn2KU=) 4: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: /ti17IFC7q1Ah/qPnVmsDmKH5schjMG9yp+KWaohlII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1223 (0x4c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5F2D, serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Validity Not Before: Sep 18 23:50:30 2026 GMT Not After : Sep 25 23:50:30 2026 GMT Subject: CN=6aadce47-be77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9c:22:81:ea:0c:33:95:ff:15:4a:43:35:2e: 08:14:8a:b2:d2:eb:d6:ab:4c:cc:4e:93:e7:1b:2c: 84:cb:e0:0e:87:be:2c:80:6c:f2:1e:b4:66:2a:59: 4c:84:63:91:32:f3:ee:5e:58:4c:cd:b1:df:f8:a3: 73:49:dd:c9:42:ef:ec:7b:38:82:cc:5f:1b:4d:51: 82:c9:8e:0d:83:a5:7a:cd:64:5e:97:0d:f5:c0:b1: a1:4a:61:f5:48:bb:88:f4:6b:16:20:3e:47:c9:de: da:68:f9:17:1b:20:66:c9:27:1a:39:b4:a2:ad:9b: 2d:af:a5:2a:52:d2:53:83:48:e4:78:a5:2f:cd:ba: 7d:48:80:4b:9c:b5:69:b4:76:c1:53:c9:90:32:bc: c1:24:a8:08:47:7a:12:dc:13:1f:48:e2:f4:6e:7d: 6b:b3:ae:8e:75:d3:4f:a7:9c:f4:fc:a9:b0:ef:2c: 10:ce:22:46:59:91:bf:88:1f:dc:8e:da:47:84:ce: 67:34:35:8f:2f:86:c4:90:b1:09:d5:b6:fb:d8:2c: e1:46:6d:b6:48:25:60:d5:4d:b0:4c:8f:b1:09:ba: c4:ea:f0:0f:13:41:44:3a:bf:8c:a3:8b:82:02:af: 20:b9:eb:91:f9:26:9d:54:f2:3c:e3:f0:a1:f4:87: 0b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D1:D8:9D:BE:4F:75:FF:B8:5F:7F:E4:F5:98:B5:8E:3F:0C:A5:8B X509v3 Authority Key Identifier: keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:af:ae:fb:fd:cb:72:70:a7:70:d3:4b:62:7d:73:b0:c4:6e: 5a:76:42:88:06:2c:63:4e:16:70:bd:20:78:60:dd:4c:16:6e: 6d:2b:73:67:5c:3e:ae:54:83:7b:31:bb:de:00:ab:2d:6b:f3: 21:16:f2:a4:d8:9f:d0:51:4c:d7:00:74:8a:c1:b1:25:bd:b0: f2:6a:d2:2b:d8:3b:86:a3:54:93:b3:da:ef:52:f2:e4:64:b3: aa:09:52:22:fd:d0:93:c6:55:cc:29:4a:62:0b:0e:7c:97:9a: aa:7a:7c:7f:d0:ec:8b:f8:83:01:8f:6c:e3:1c:fb:6e:5b:b3: 25:31:f9:42:a2:c8:75:8e:56:70:ee:ff:89:10:05:c8:bf:49: 4d:e7:4d:c2:94:15:0b:f3:bf:28:d5:c9:9d:b4:21:47:13:2a: 17:7a:cd:1e:4a:eb:97:65:92:42:6f:83:23:c8:7c:5d:a9:31: e1:22:8a:3d:47:7e:37:72:a3:67:9b:2d:73:92:56:39:b8:6f: 41:0c:63:2b:78:e1:ca:3e:7a:7e:40:7f:d5:d1:7f:bd:29:c5: 8f:ae:14:c3:5c:6a:c6:dd:80:14:af:8d:9e:a3:85:09:1b:8b: bb:ec:fb:e8:c4:24:5e:5a:a1:22:c1:11:7c:9f:00:b3:5e:3c: 52:dc:0c:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVGMkQxMTAvBgNVBAUTKEEwMTNCMTM4OEEzOTMzQkUxMDZCRUFFRERGRTlGM0I4 MzQ2RDM3NDgwHhcNMjYwOTE4MjM1MDMwWhcNMjYwOTI1MjM1MDMwWjAYMRYwFAYD VQQDEw02YWFkY2U0Ny1iZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZwigeoMM5X/FUpDNS4IFIqy0uvWq0zMTpPnGyyEy+AOh74sgGzyHrRmKllM hGORMvPuXlhMzbHf+KNzSd3JQu/seziCzF8bTVGCyY4Ng6V6zWRelw31wLGhSmH1 SLuI9GsWID5Hyd7aaPkXGyBmyScaObSirZstr6UqUtJTg0jkeKUvzbp9SIBLnLVp tHbBU8mQMrzBJKgIR3oS3BMfSOL0bn1rs66OddNPp5z0/Kmw7ywQziJGWZG/iB/c jtpHhM5nNDWPL4bEkLEJ1bb72CzhRm22SCVg1U2wTI+xCbrE6vAPE0FEOr+Mo4uC Aq8gueuR+SadVPI84/Ch9IcLawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHR2J2+ T3X/uF9/5PWYtY4/DKWLMB8GA1UdIwQYMBaAFKATsTiKOTO+EGvq7d/p87g0bTdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUYyRC9DRDZENkU1Njk4 OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03NFFhLXJ0My1uenVEUnRO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29CT3hPSW81TTc0UWEtcnQzLW56dURSdE4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUYyRC9DRDZENkU1Njk4OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03 NFFhLXJ0My1uenVEUnROMGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMK+u+/3LcnCncNNLYn1zsMRuWnZCiAYsY04WcL0geGDdTBZubStzZ1w+rlSD ezG73gCrLWvzIRbypNif0FFM1wB0isGxJb2w8mrSK9g7hqNUk7Pa71Ly5GSzqglS Iv3Qk8ZVzClKYgsOfJeaqnp8f9Dsi/iDAY9s4xz7bluzJTH5QqLIdY5WcO7/iRAF yL9JTedNwpQVC/O/KNXJnbQhRxMqF3rNHkrrl2WSQm+DI8h8Xakx4SKKPUd+N3Kj Z5stc5JWObhvQQxjK3jhyj56fkB/1dF/vSnFj64Uw1xqxt2AFK+NnqOFCRuLu+z7 6MQkXlqhIsERfJ8As148UtwMqQ== -----END CERTIFICATE-----Generated at Sun Sep 20 20:33:31 2026 by rpki-client